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Abstract. In this article we will describe a surprising observation that oc- 
curred in the construction of quadratic unramified extensions of a family of 
pure cubic number fields. Attempting to find an explanation will lead us on 
a magical mystery tour through the land of pure cubic number fields, Hilbcrt 
class fields, and elliptic curves. 



September 1, 2011 

Euler was one of the (if not the) most prolific writers in mathematics. Yet few if 
any of the articles appearing today are modeled after Euler's way of writing; Euler 
often explained how he attacked a problem even if the attack ultimately proved 
unsuccessful: before showing that an equation such as x 3 + y 3 = z 3 is not solvable 
in integers he would try out one method of solving diophantine equations after 
another. Gauss's motto "pauca sed matura" places him at the other end of the 
spectrum: Gauss did not care very much about conveying the motivation behind 
his proofs or about sketching the paths that led him there, and Landau later wrote 
a whole series of textbooks that consisted of little more than definitions, theorems 
and proofs. 

Today, articles written in Euler's style have almost disappeared from the liter- 
ature for obvious economic (and other) reasons. Here I would like to revive the 
Eulerian tradition and describe in some detail the development from a curious ob- 
servation on class numbers to the results in Section [Sj What happened was that I 
numerically tested a result I wanted to use as an exercise for [10] ; it turned out that 
the family of pure cubic number fields Q(-^m) for cubefree values of m = 8b 3 + 3 
with 1 < b < 89 had even class numbers, but that the class number was odd for 
6 = 89. 

1. An Exercise in Class Field Theory 

Consider pure cubic number fields K = Q(\/m) with m = a 3 + 3, and assume 
that m is cubefree. The element a — w, where w = y^rri, has norm N(a — uj) = 
a 3 — m = —3. Since m = 2, 3, 4 mod 9, the prime 3 is ramified completely in K/Q. 
Thus (a — uj) 3 = (3), and the element e = — |(a — uj) 3 = 1 + a 2 uj — aui 2 must be a 
unit in the ring of integers Ok ■ 

If a = mod 4, this unit is positive and congruent to 1 mod 4, hence K[^/e)jK 
is an unramified quadratic extension of K. 

Proposition 1.1. Let a > be an integer and assume that m — a 3 + 3 is cubefree. 
If 4 | a and a ^ 0, then the class number of K — Q(^/m) is even. 

It only remains to show that the unit e is not a square: 

Lemma 1.2. Let a > be an integer and assume that m = a 3 + 3 is cubefree. 
Then e = 1 + a 2 uj — aui 2 is not a square in K = Q(-^/m). 

l 
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Proof. From e = \{uo — a) 3 we see that if e is a square in Ok, then 3uj — 3a = /3 2 
is a square in K . With (5 = r + su + iw 2 we find the equations 

r 2 + 2st = -3a, 2rs + mt 2 = 3 and s 2 + 2rt = 0. 

Since m > 3, these equations imply st < 0, rs < and < 0: but this is clearly 
impossible. □ 

If a = 2 mod 4, let us write a = 2b and m = 86 3 + 3; the unit e = 1 + 46 2 w — 26a; 2 
is not congruent to a square modulo 4, but computing the class numbers of a few 
fields K b = Q(v / rn) produces the following results: 



b 


1 


3 


5 7 9 


11 


13 


m 


11 


3 • 73 


17-59 41-67 3-5-389 


10651 


17579 


h(K b ) 


2 


18 


54 168 240 


564 


920 



Although these class numbers are all even, searching for a family of explicit gener- 
ators of unramified quadratic extensions of these cubic fields was unsuccessful. 

Continuing this table shows that h(Kb) is odd for b = 19; but here m = 54875 = 
5 3 ■ 439 is not cubefree. The calculations have to be extended considerably before 
something surprising happens: 



b 


85 


86 87 


88 


89 


m 


619 • 7937 


23 2 • 9619 3 • 1756009 


5451779 


5- 11-41 2 -61 


h(K b ) 


153954 


6000 151200 


186860 


3375 



Thus the class number of K b for b = 89 is odd, although it is even for all 87 
values less than 89 for which m = 86 3 + 3 is squarefree. This clearly cannot be an 
accident; but how can we explain this phenomenon? 



2. Elliptic Curves 

Let m = 8o 3 + 3 for integers b > 1, assume that m is cubefree, and let K b = Q(uj) 
denote the pure cubic number field defined by lo — ifm. 

We now consider the family of elliptic curves E b : y 2 = x 3 — m. A rational point 
on a curve E b has the forrrQ x — and y — , and clearing denominators shows 
that such rational points correspond to solutions of the equation s 2 = r — mt e . In 
other words: the norm of the element r — t 2 uj 6 K b is a square. If this element is 
coprimc to its conjugates, then there must be an ideal a with (r — t 2 oj) = a 2 , and 
if a is not principal, then the class number of K a will be even. 

Computing a couple of rational points on these curves E b produces the following 
table of selected points (here we have included even values of b): 



b 


1 2 3 4 5 


p 


(3,4) (17/4,25/8) (55/9,82/27) (129/16,193/64) (251/25,376/125) 



For standard results on the arithmetic of elliptic curves we refer to 1 151 for a first introduction. 
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These points all have the form (f(b)/b 2 ,g(b)/b 3 ) for some (yet) unknown func- 
tions / and g. Computing the differences we find 

3 17 55 129 251 433 

14 38 74 122 182 

24 36 48 60 

12 12 12 

The fact that the third differences seem to be constant and equal to 12 = 2 • 3! 
suggests that f(b) = 2b 3 + terms of lower order, and then it is easy to guess that 

-2& 3 + l 3fc 3 + T 



(2-D n v b2 , b3 

is a family of rational points on the elliptic curves Eb- Since torsion points must 
be integral, we find 

Lemma 2.1. Let a > be an integer and assume that m — a 3 + 3 is cubefree. The 
elliptic curves Eb : y 2 = x 3 — m have rank at least 1, and the rational points in 
have infinite order. 

Thus all curves Eb have rank at least 1. Does this explain the fact that the class 
numbers of Kb tend to be even? Before we return to this question, let us describe 
an approach that could have predicted the family of rational points Pb- 

3. Quadratic Fields 

The points Pb = (x, y) from \2.1\ satisfy y 2 = x 3 — m; clearing denominators 
then gives 

(3.1) (36 3 + l) 2 +b 6 m = {2b 3 + l) 3 . 

Since the elements r = 3fo 3 + l + 6 3 \/ — m and r' = 3fe 3 + 1 — b 3 \/— rn generate coprimc 
ideals in kb = Q^—m ), there must be an integral ideal a in fc& with (r) = a 3 . This 
suggests that the class numbers of the quadratic number fields kb should have a 
tendency to be divisible by 3. Numerical experiments, however, reveal that this is 
not correct. In fact, the element r with norm (26 3 + l) 3 is a cube since 



(3.2) 36 2 
Thus we have seen 

Lemma 3.1. The element t = 3b 3 + 1 + b 3 ^/—m in Q(y/—m ) is a cube. In 
particular, the ideal a with (r) = a 3 is principal. 

This also means that the rational points Pb on the family of elliptic curves Eb 
could have been constructed in a rather trivial way: for m — 8b 3 + 3, taking the 
cube of the element^ immediately gives (13.21) and thus the points Pb. 

The ideal classes [a] of order dividing 3 in the quadratic number fields kb are all 
trivial. This begs the question whether the ideal classes of order dividing 2 in the 
number fields Kb deduced from (|3.ip are also trivial. This is what we will look into 
next. 



2 To be honest, this only worked because the coefficient of y/— m is a cube; taking the third 



power of i(3 + \J— m ), for example, does not work since its cube is —9b 3 + (3 — fe 3 )^ 



-in. 
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4. Pure Cubic Fields 

Let us now write the equation (|3.1j) in the form 

(36 3 + l) 2 = (2b 3 + l) 3 - 6 6 m = N(2b 3 + 1 - b 2 uj). 

The element a = 2b 3 + 1 — b 2 io has square norm; if it is the square of a principal 
ideal, it will not explain our observations on class numbers. Playing around with 
elements of small norm leads us to the observation^ that 

(46 3 + l) 3 - b 3 ■ m 2 = 3b 3 + 1, 

which shows that 

N(/3) = 3b 3 + 1 for (3 = 46 3 + 1 - buj 2 . 
Thus there exist elements of norm 3& 3 + 1; but is 1 ~ al The answer is no because 

P 2 = 166 6 + 8b 3 + 1 + b 2 (8b 3 + 3)w - (86 4 + 2b)u 2 . 
A simple calculation, however, shows that 

ea = f3 2 , 

where e = 1 + 4b 2 u — 2bu> is the unit in Kb we have started with. Thus (a) is the 
square of the principal ideal (/?), and so the ideal classes coming from the rational 
points _Pb are all trivial. It seems that we are back to square one. 

5. Back to Elliptic Curves 

The family of points Pb on the elliptic curves Eb shows that these curves all have 
rank > 1. In fact, the curves Eb for small values of b all have rank > 2: in fact, the 
Mordell-Weil rank is 2 for 1 < b < 90 except for 

• the values 6 = 9, 17, 18, 20, 25, 53, 54, 67, 82, 87 for which the rank is 4; 

• the value b — 13 for which the computation of the rank is complicated by 
the likely presence of a nontrivial Tate-Shafarevich group; here the rank is 
bounded by 2 < r < 4, and the 2-Selmer rank is even. 

• the values b = 77 and a = 80, for which the Selmer rank is 2, but the second 
generator has large height. 

• the values b = 44 and a = 89, for which the rank is 1. 

• the values b = 56, 68, 69, 86, for which the rank is 3. 

These results show that trying to construct two independent families of points 
on Eb is bound to fail since there are examples of curves with rank 1. We therefore 
should show that the ranks of the curves Eb have a tendency to be even. This can 
be accomplished with the help of the parity conjecture. 

Parity Conjectures. For formulating the various statements connected with the 
name partiy conjectures, let r denote the Mordell-Weil rank of an elliptic curve, 
and R the analytic rank, that is, the order of vanishing of the L-series of E at s = 1. 
The conjecture of Birch and Swinnerton-Dyer predicts that r = R. 

The functional equation of the L-series of E connects the values at s and 2 — s; 
the completed L-series L* satsifes the functional equation 

L* E (2-s) =w(E)L*{s), 



3 Observe that (4b 2 + l) 3 = 64fe 6 + 48b 4 + 12b 2 + 1 and m? = 646 6 + 486 3 + 9; in order to make 
the second terms vanish we only have to adjust the coefficients slightly. 
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where w(E) £ {±1} is called Artin's root number. If w(E) = — 1, then setting s = 1 
in the functional equation implies L(l) = 0, and the Birch and Swinnerton-Dyer 
Conjecture predicts that E has rank > 1. More generally, the parity conjecture 
states that (—1)' = w(E). Performing a p-descent on an elliptic curve provides us 
with the p-Selmer rank r p of E, and this rank differs from the rank r of E by an 
even number if the Tate-Shafarevich group of E is finite. 

Theorem 5.1. IfHI(E) is finite, then the parity conjecture (— l) r = w(E) holds. 

The root number for elliptic curves with j-invariant was computed by Birch 
and Stephens; for our curves Ef, we find that (see Liverance 



Thus we expect that the rank r\, of E\> is even whenever m is squarefree, and 
that it is odd if r& is divisible by the square of a unique prime p = 2 mod 3. The 
values b < 200 for which this happens are 



which agrees perfectly with our computations above. Observe that the class number 
for b = 419 is even, and that m = 5 2 • ll 2 • 227 • 857 is divisible by the square of two 
primes p = 2 mod 3. 

The only examples of pure cubic fields Kj, with odd class numbers for b < 1630 
and cubefree m are 



For all these b, the number m — 8& 3 +3 is divisible by exactly one prime p = 2 mod 3. 
The many values of b ending in 19 are explained by the observation that m is 
divisible by 5 2 if m = 19, 69 mod 100. 

Nothing so far prevents a pure cubic field Kb from having an odd class number 
if the rank of Ef, is even: the rational points on Eb give rise to ideals a in Kb whose 
squares are principal, but there is no guarantee that a is not principal. Yet all 
available numerical evidence points towards the following 

Conjecture 1. Let b > 1 be an integer and assume that m = 8b 3 + 3 is cubefree. 
If the class number of Kb — Q(\/m) is odd, then the rank of the elliptic curve 
Eb : y = x — m is 1. 

This conjecture implies, by the parity conjecture, the following, which does not 
even mention elliptic curves: 

Conjecture 2. Let b > 1 be an integer and assume that m = 8b 3 + 3 is cubefree. 
If the class number of Kb = Q(\/rn) is odd, then m is divisible by an odd number 
of squares of primes p = 2 mod 3. 

A weaker formulation of the conjecture would be that the class number of Kb 
is even whenever m is squarefree. Even this weaker conjecture is unlike anything I 
would have expected. After all, the primes with exponent 1 and 2 in the prime 
factorization of m change their roles when m is replaced by m 2 (observe that 




b = 44, 56, 68, 69, 86, 89, 94, 119, 169, 177, 194, 



b = 89, 119, 169, 177, 209, 369, 369, 503, 615, 661, 719, 787, 
903, 1069, 1145, 1219, 1319, 1365, 1387, 1419, 1629. 




))• 
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6. Nobody Expects the Spanish Inquisition 

In the conjectures above, the condition that m be squarefree seemed quite sur- 
prising at first. This condition also occurs in the computation of an integral basis 
of pure cubic fields: it is well known that the ring of integers in Q(tfm) is given 
by %\\pm\ (such cubic fields are called monogenic) if and only if m ^ ±1 mod 9 is 
squarefree. If, on the other hand, m is divisible by the square of a prime p, then 
i'v'm 2 is integral, and the field is not monogenic. 

But what should the form of an integral basis have to do with the parity of the 
class number? Ten years ago, just about any number theorist you would have asked 
probably would have answered "nothing!" and would have quoted the heuristics of 
Cohen, Lenstra and Martinet as supporting evidence. In fact, Cohen and Lenstra [3] 
gave an explanation of the numerical evidence for the distribution of class numbers 
of quadratic number fields based on certain heuristics; the main idea was that 
it's not the actual size of a class group that matters but rather the size of its 
automorphism group. It is clear that the prime 2 behaves differently in quadratic 
extensions k since the 2-class group Cl2(fc) is far from being random: Gauss's genus 
theory predicts its rank, and even the invariants divisible by 4. 

Cohen and Martinet [I] then extended this project to class groups of extensions 
of higher degree. As in the case of quadratic extensions there were "bad primes" p 
for which the behaviour of the p-class group Cl p (k) was not believed to be random; 
in [4], the prime 2 was considered to be good for nonnormal cubic extensions k 
although it divides the degree of the normal closure of fc/Q. In particular, the 
probability that the class number of k is even was predicted to be about p = 0.25932. 
In [5], however, the authors cast some doubt on their earlier conjectures and asked 
whether the prime 2 actually was bad in this case. 

Finally Bhargava and Shankar [1 proved the following result: the average size 
of the 2-class groups of complex cubic number fields ordered by discriminant (or 
height) is smaller than the corresponding average for monogenic cubic fields. Their 
result agrees with the Cohen-Martinet prediction based on the assumption that the 
prime 2 is good for nonnormal cubic fields. 

An observation suggesting a relation between monogenic rings and the distri- 
bution of class groups can actually already be found in the article |7j, where the 
authors computed the 2-rank of pure cubic number fields Qi-^m) by studying the 
elliptic curves E : y 2 — x 3 =F m and remarked 

The primed p = ±1 mod 9 have relatively small 2-class numbers. 
It seems that the reason for this is the fact that Ak : y 2 — x 3 + k 
has a point of order 2 in Q3 iff k 2 = 1 mod 9 . . . 

Let me add the remark that the fact that the 2-class groups of the fields do 
not seem to be random does, of course, not imply that the prime 2 is bad in the 
sense of Cohen-Martinet because the family of fields has density 0. 

7. Why the class number of Q(v / lT) is even 

Since we have started our tour with the question why the class number of Q( vLT ) 
is even it is about time we provide an answer. 

Consider the elliptic curve E : y 2 = x 3 — m for some cubefree integer m = 
3 mod 4, and let K = Q(w) denote the pure cubic number field defined by oj = yfm. 



^More precisely: the fields Q[Wp). 
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If P = (r/t 2 , s/t 3 ) is a rational point with t = mod 2, then s 2 = r 3 — mi 6 shows 
that a = r — t 2 uj e K is congruent to 1 mod 4; moreover, (a) is, as we will see 
below, an ideal square. Thus the field K(^/a) is a quadratic unramified extension 
of K, and by class field theory, K has even class number. 

Computing the generators of the Mordell-Weil group E(Q) of the elliptic curve 
E : y 2 = x 3 - 11 we find the two points P = (3,4) and Q = (15,58). The sum 
P + Q = (9/4, —5/8) has the desired form, hence a = 9 — Auj works. The minimal 
polynomial of y/a is f(x) = x 6 — 27a; 4 + 243a; 2 — 25, and the discriminant of the 
number field generated by a root of / is 3 6 11 4 ; a "smaller" polynomial generating 
the same number field is g(x) — x 6 — 3x 5 + 9x 4 — 1. Thus K = Q(vTT) has the 
unramified quadratic extension K(\/9 — Auj ). 



point 






a 




[ap] 


(3,4) 


P 


3 


— UJ 




1 


(15,58) 


Q 


15 


— UJ 


2i • 29 


\A 


(9 _5) 
U' 8/ 


P + Q 


9- 


- Auj 


5 


[A 


/345 6179 <i 
V 64 ' 512 / 


2P 


345 


- 64cj 


37 3 ' 167 


1 


( 51945 10647157 \ 
v 13456 ' 1560896 ' 


2Q 


51945 - 


- 13456w 


37i ' 83 • 3467 


1 


( 861139 799027820^ 
^ 23409 ' 3581577 / 


3P 


861139 


- 23409a; 


2.1 • 5 • 2.3 • 1737017 


1 



The prime 2 splits into two prime ideals in K, namely 21 with norm 2 and 12 
with norm 4. The squares of these ideals are principal: we have z\ = (5 + 2uj + uj 2 ) 
and 22 = (3 + uj — uj 2 ). 

The prime number 37 splits into three prime ideals in K; the prime ideals 
in the decomposition (37) = 37i372373 are determined by the congruences to = 
—9 mod 37 l5 uj = —12 mod 37 2 , and uj = —16 mod 373. The first two ideals are 
nonprincipal, whereas 373 is generated by 5 — 2u>. This is compatible with our 
construction of the Hilbcrt class field of K: a computation of the quadratic residue 
symbols shows that 



9 - Auj 



37i 



(I) 



-1, 



9 - Auj 



37 2 



(I) 



-1, 



9 - Auj 



37 3 



(P)-~ 



Thus only 373 splits in the Hilbert class field. 

Without going into details we remark that a3Q belongs to the ideal class [2]. 
This is compatible with the conjecture that the map P — » [ap] is a homomorphism 
from E(Q) to C1(X)[2]. 

Similarly, for b = 3 and m — 219, the curve Es(Q) is generated by P = 
(55/9,82/27) and Q = (283/9,4744/27), and the sum P + Q provides us with 
the quadratic unramified extension K(y/a) for a = 115657— 12996w. The minimal 
polynomial of ^/a is f(x) = x 6 - 346971a; 4 + 40129624947x 2 - 1066391672856409, 
a "smaller" polynomial whose root generates the same number field is g(x) = 
x 6 - 3a; 5 + 21a; 4 '- 37a; 3 + 126a; 2 - 108a; - 3. 

8. Hilbert Class Fields via Elliptic Curves 
We will now show that this construction works whenever E has rank > 2: 



Theorem 8.1. Let b be an odd integer such that m = 
the class number of Q(tfm) is even whenever E : y 2 



8b 3 + 3 is squarefree. Then 
— x 3 — m has rank > 2. If 
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the parity conjecture holds, then the class number is even for all squarefree values 
ofm. 

This theorem will be proved by showing that if there is a point P = (r/t 2 , s/t 3 ) 
on E(Q) \ 2E(Q) with 2 | t, then the extension H = K(^/a) of K is a quadratic 
unramified extension. 

For showing that H/K is unramified we have to verify the following claims: 

• a > 0, which implies that the extension H/K is unramified at the infinite 
primes; 

• a = 1 mod 4, which implies that H/K is unramified above 2; 

• (a) = a 2 is an ideal square, which implies that H/K is unramified at all 
finite primes not dividing 2. 

The first claim is trivial since Na = s 2 > 0, and the second claim follows from the 
assumption 2 | t. It remains to show that (a) is an ideal square: 

Lemma 8.2. Let P = (r /t 2 , s/t 3 ) be a rational point on : y 2 — x 3 — m for a 
squarefree value of m = 8b 3 + 3. Assume as above that gcd(r, t) = gcd(s,t) = 1. 
Then the ideal (a) for a = r — t 2 uj is the square of an ideal a in Kb . 

Proof. The ideal (a) is a square if Na is a square and (a, a 1 ) = (1) in K' b = 
Q(V — 3, a;). In our case, Na = s 2 , and any ideal divisor of a and a' divides the 
difference a — a! = (1 — p)t 2 ui. Since gcd(s, t) = 1, this ideal must divide (1 — p)uj. 
Any prime ideal dividing uj and s also divides r, so its norm divides both r and s, 
hence the square of its norm divides mt e . Since gcd(r, t) = 1, it must divide m, 
and this contradicts the assumption that m be squarefree. 

Thus the only possibilities for d = (a, a') are D = (1) and = 3, where 3 is the 
prime ideal above 3 (recall that m = 2,3,4 mod 9, hence 2>Ok = 3 3 )- The second 
case is only possible if 3 | s, but this leads quickly to a contradiction, since in this 
case r and t are not divisible by 3, and r 2 — mt 6 is not divisibly by 9 in this case. 
Thus (a) = a 2 is an ideal square. □ 

For showing that H/K is a quadratic extension we need to know when a is 
square in K. To this end let us first characterize the points on E that give rise to 
squares: 

Lemma 8.3. Let m be a cubefree integer, K = Q(w) the corresponding pure cubic 
number field with lo 3 = m, and E : y 2 = x 3 — m an elliptic curve. Every rational 
affine point P e E(Q) can be written in the form P = (r/t 2 , s/t 3 ) for integers r, s, t 
with gcd(r, t) — gcd(s,i) = 1. 

The map a : E(Q) — > K x /K x2 defined by a(P) = (r — t 2 cu)K x2 is a group 
homomorphism whose kernel contains 2E(Q); more exactly a(2P) is represented by 
the square of f3 = (r — t 2 u) 2 — 3(t 2 Lj) 2 . 

Finally if P € kera and t is even, then P = 2Q for some Q G E(Q). 

Proof. For a proof that we may assume gcd(r, t) = gcd(s, t) = 1 see [15] . 

Performing a 2-descent on the elliptic curve E : y 2 — x 3 — m means studying 
the Weil map E{K) — > K x /K x2 which sends a X-rational point P — (x,y) to 
the coset represented by x — uj. The fact that the Weil map is a homomorphism 
is classical (see e.g. [15]); in particular, the restriction of the Weil map to E(Q) is 
also a homomorphism. 

Since the target group is K x modulo squares, the Weil map can be defined by 
a{P) = {r-t 2 uj)K x2 . 
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Now assume that a(P) = (r - t 2 u)K x 2 and set (3 = a{P) 2 - 3i 4 w 2 . Then 
/3 2 = (r 2 - 2rt 2 uj - 2t 4 u 2 ) 2 = r 4 + 8rt 6 m - 4t 2 Lo(r 3 - mt 6 ). 
On the other hand, the group law on E gives 

/9x 4 27x 6 9x 3 \ _ p 4 +8mi x 6 - 20mx 3 - 8m 2 

2(x ' y) " VV ~"82/^ + ^7~ y J ~ V (2y) 2 ' (2yJ 3 

Thus 



x 4 + 8mx x 4 + 8mx r 4 / t s + 8mr / t 2 r 4 + 8rmt 6 

X2P 



(2y) 2 Ax 3 - Am 4r 3 /t 6 -4m At 2 (r 3 - mt 6 ) ' 

and this implies the claim. 

Finally assume that a(P) £ K x 2 for P = (x,y). Since 

y 2 = x 3 — m — (x — ui)(x — pui){x — p 2 w), 

we find that 

x 2 + xuj + uj 2 — (x - puj)(x - p 2 uj) £ K x2 . 

The ideals (x — pu>) and (x — p 2 uj) are coprime in L = K(y/—3 ) by the proof of 
Lemma I8~2l hence 

(8.1) r - put 2 = rj/3 2 

for some unit rj in L. Now we need a variant of Rummer's Lemma for L: 
Proposition 8.4. If r] is a unit in L with r] = £ 2 mod 4, then rj is a square. 



Since the left hand side of (|8.ip is congruent to 1 mod 4, Prop. 18.41 implies 
that rj is a square. But then r — put 2 (and therefore also r — p 2 u)t 2 ) is a square. 
By [BJ Prop. 1.7.5], we have P = {xp,yp) — 2Q for some point Q £ E(Q) on 
E ■ y 2 = f(x) = [x — ei)(x — ea)(a; — 63) if and only if xp — ej is a square in Q(ej) 
for j — 1,2,3. This implies our claimtQ. □ 

If E has rank > 2, let P and Q denote two generators of E(Q). If one of them 
has the desired form, we are done. If not, then we claim that P + Q works: 

Lemma 8.5. If P and Q are independent points with odd denominators, then 
P + Q = (r/t 2 ,s/t 3 ) with gcd(r, t) = gcd(s, f) = 1 and 2 | t. 

Proof. This is a direct consequence of the addition formulas. In fact, we find 
X3 = p 2 — xi — x 2 for p = ffEi7- Now (y 1 - y 2 )(yi + 2/2) = y\ - yl = x\ - x 3 , = 
(x\ — X2){x\ + X1X2 + x 2 ); we know by assumption that x\ = x% = \ mod 2, hence 
the right hand side is divisible by 2. Since the second bracket on the right side is 
odd, the whole power of 2 is contained in x\ — x 2 . On the left hand side, the power 
of 2 is split among the factors y\ — y 2 and y\ +2/2, both of which are even. This 
implies that the denominator of p must be even. In particular, the denominator of 
X3 = p 2 — Xi — x 2 must also be even, which is what we wanted to prove. □ 

It remains to give a 



Proof of Prop. \8.4\ We start by determining the unit group of L. We know that 
Ek — (— l,e); it is easy to verify that E = (—p,e,e') has finite index in El 
(for example by showing that the regulator of this group is nonzero), where e' = 
1 + 4b 2 puj — 2bp 2 u 2 is the conjugate of e over K. We first show that E = El- 



simpler proof that P = 2Q in this case can be found in [9] . 
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• The units ±e are not squares in L. In fact, if ±£ is a square in L, then 
L = K(^/±e ). This implies that L/K is unramified outside 2oo, which 
contradicts the fact that L/K is ramified above 3. 

• The units ±p c e are not squares in L: this follows from above by noting 
that p is a square in L. 

• The units ±p c e' and ±p c e" are not squares in L: this follows by applying 
a suitable automorphism of Gal(L/Q). 

• The units ±p c s's" are not squares in L: this follows from the above by 
observing that e'e" = l/e. 

This shows that E has odd index in E^. The fact that the index must then be 1 
follows by applying the norm N L / K to any relation of the form (—p) a e b e' c = rf. 

Now assume that ?y = £ 2 mod 4 for some unit r] G El . Since p is a square, we 
may assume that i] = (— l) a e b e' c with a, b, c g {0, 1}. We know that rj = 1 mod 2; if 
77 = £ 2 mod 4, we must have r\ = 1 mod 4. Checking the finitely many possibilities 
we easily deduce that a = b = c = 0, and this implies the claim. □ 

This completes the proof of Theorem 18.11 As a matter of fact, we can prove 
something stronger: 

Theorem 8.6. Let b be an odd integer such that to — 8b 3 + 3 is squarefree. Then 
the 2-rank s of the class group C^if) of K — Q(-^m) and the rank r of the 
Mordell-Weil group E(Q>) of E : y 2 ~ x 3 — m satisfy the inequality 

(8.2) r<s + l. 

Proof. Let Pi, . . . , denote the generators of E(<Q) with even denominators, and 
Pk+i, ■ ■ ■ ,P r those with odd denominators. Then the points Pi, . . . , Pk, Pk+i + 
P r , . . . , P r -i + P r are independent points in E(Q) \ 2E(Q) with even denominators; 
by what we have proved, the pure cubic field K has r — 1 independent unramified 
quadratic extensions. □ 

In the only case where we have been unable to compute the rank of the curve 
Eb, namely for b = 13, we find s — 3 and therefore r < 4. This does not improve on 
the bound coming from the Selmer rank, but it suggests that the rank r of E(Q) 
in the preceding theorem may perhaps be replaced by some Selmer rank. 

An inequality similar to (|8.2j) for general elliptic curves was given by Billing (see 
Sect. 3.7]). For curves E : y 2 = x 3 — m, Billings bound was 

{s + 1 if m ^ ±1 mod 9, 
s + 2 if to = ±1 mod 9. 

The main difference between Billing's result applied to E\> and ours is that Billing 
proved r < s + 1, whereas we proved s > r — 1 by more or less explicitly exhibiting 
generators of the quadratic unramified extensions of K. 

Additional Remarks and Open Problems 

The explanation that the fields Kf, tend to have even class numbers could have 
been giving by simply citing the parity conjecture and Billing's bound. We have 
shown more by using rational points on elliptic curves for constructing subfields of 
Hilbert class fields. It remains to be studied how much of Billing's bound can be 
proved in a similar way. 



PURE CUBIC NUMBER FIELDS 



11 



Instead of using the curves E m : y 2 — x 3 — to we could also investigate the 
family E- m : y 2 = x 3 + to; in this case, the root number is w(E- m ) = —w(E m ), 
so we expect that its rank is odd whenever to is squarefree. For the curves with 
rank 1, the generator seems to have even denominator in most cases. It also seems 
that the curves E_ m more often have nontrivial Tate-Shafarevich groups than the 
curves E m , but this might be a general feature of families of elliptic curves with 
root number — 1 when compared with families of curves with rank > 1 and positive 
root number. 

I would like to call the attention of the readers to the fact that Soleng [TC] has 
constructed a homomorphism from the group of rational points on elliptic curves 
to the class groups of certain quadratic number fields. Our map sending the points 
P = (r/t 2 ,s/t 3 ) with even t to the ideal class [b], where (s + t 3 y/—m ) = b 2 , 
does not seem to be a special case of Soleng's construction. Is this map also a 
homomorphism? How are these maps related to the group structure on Pell surfaces 
y 2 + mz 2 = x 3 studied in [8]? 

Our calculations in the Mordell-Weil group of y 2 = x 3 — 1 1 and the correspond- 
ing pure cubic field K — Q(v / lT ) paired with a strong belief in the prestabilized 
harmony of algebraic number theory and a considerable amount of wishful thinking 
suggest the following: If P = (x, y) with x — 4% is a rational point on the elliptic 
curve E : y 2 — x 3 — m, then under suitable conditions on m, the ideal (r — t 2 ui) = ap 
is an ideal square in K — Q($/rn), and the map sending P to the ideal class of ap 
is a homomorphism from E(Q) to the 2-class group Cl(i£)[2] of the pure cubic field 
K; this is certainly a problem that deserves to be studied. 

Paul Monsky gave a proof that the class number of Q(tfp) is even for primes 
p = 9 mod 16 based on the parity conjecture in [13j : an unconditional proof of this 
fact can be found in [M] . Is it possible to give an unconditional proof of the results 
on the parity of the class numbers of the pure cubic fields Kb? 
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